Chinese products spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 29 Mar 2026 22:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w745u-00000000MKE-459I
for dave@doctor.nl2k.ab.ca;
Sun, 29 Mar 2026 22:19:18 -0600
Resent-From: The Doctor
Resent-Date: Sun, 29 Mar 2026 22:19:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out203-205-221-240.mail.qq.com ([203.205.221.240]:36487)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1w72JO-00000000HoT-2lxY
for root@nk.ca;
Sun, 29 Mar 2026 20:25:18 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=foxmail.com;
s=s201512; t=1774837448;
bh=UXHx9ucifMGd3O7Nz+eXX38iiuVY1SiqwkH/qLbb1tc=;
h=From:Subject:Date:To;
b=DjR+LbZNPGMBCSRb19GnQc3eYcLKD/r6tNVzaNEfbBe+aZwjkaZqrRxZnFcBuLND9
OuJ19wEl9RSCaMs3xvZL+wIMq1iyTdp6sih9x/OXXp8U1XStm4UoUQJEqI1QnzEjYU
LRT6WdCdMKuNOMD5mmGDpuuZTs8ZQPaHKVdLSG88=
X-QQ-XMRINFO: MPJ6Tf5t3I/ylTmHUqvI8+Wpn+Gzalws3A==
X-QQ-XMAILINFO: OemBQX/oPQM7LjPPt3tlSWKLw6ZiQ7+lQEGslLh3d6Gi4ZhP5uMEdbmaKEfe8p
2X1BVRTcIAbEvSWRKrxhoHNonpJMBqOxPTNoeGO9PLSK4/OFYu2s4oS1NV2DxG4ENYBwQw+sLgGD3
Plkpqp0I2lYOjYWS0Lbe+SfDRnWYmjpYMa5rcpn7GOGZ7HAOjx5yakEPaB4EImkkFMoQRrl6rxmmi
1dT9l7nFeMXiDwx0r1ZZwl78D9vedB+2sNzxRLGN44aFR/z8mc+BmXSMads5elxhdbitlNKAUIpGH
mGF9HzObQL++qcVgVYkQijUBwm4fRuGufTBrJ6mplbdkZ3xafXgqedBEr/kwIk+gIhzPc9Lpn63hX
o1SxUtknZr7JADJsZTHtc6lgr++llrcThWhaNCaYG3sMi5cXNoNl9tSBNj0eiJ7uJ6kB2iYRbGdN+
sFYxVCqbe/zg0iqEexyY3CPHsnZRSh9oYuJHQlBPBZGDaivlKqEZyVbKPo5If9Rdx7tpHAW7M6rga
3PQzWYRZDuI9UCRuqUoj6AC8sm02C6BYTJm3P5Hkq1OvKLtrMcVKg0Cd6zg8Wehq3IJ8z4u93udxO
0CW2hZWqhTEI7x5HdanNgzKrnbP40Am7X5MX0rH5ZVlPEHVc7QM51KKD5rVd73+Fyxx4E1fDDrN7w
5sqW96kIcYa/jOeulhFTbZW3ccW0u7riZz7p0OKNoOZOFJ/RVvtCOSQ5fk2c3WT3HOFmPlF8sR9QH
2T0+zdd8xQ8FftSoF3XT30lvpm+rhs4Pbkd8qLAvSMaEOYzX/VpTs9EehZ6nFgGzj9F1LMmrtZ1Vd
+AiftHqEkW637R5Xo2LgJzoL+WafrOtnwCa2p8DpswdLXdj8zA7pehePxoFVHxvk+qnX6Qn2cL3TZ
MYc/4P0mgCqWZ5DaKfR97tCgHviXE/mMfKcVGKNMqij19kZc8E5yI/4bqVgt/Dpku25o2I+VLiOZS
/R3HUjSLy2DK/ZcjtO7RxAdJ1NdJIi1PThW/VgdqcYtT7GOglTDB5vAHXfUwewjn8vc8xEaQAmf+2
HudZUiIpYsQ9u1hiaxNuHygg77RgeJoxdJFgjBaaZPKmCkI6ypvTevMzpruFZn27+75k8znp0uO2P
B+IbhMd2fsUjOCLPjXzWU5wbMTIIeh12T4Cs2ZJoyfd6kZ2tAIfodP5aOi03znspqNSZcJzpFUWD+
uMEAkc0XxOVQA8526GVTF9NszLXizAfjTckdWVWDCFeARPpIUuNVFP8ihIx7g8RNHZpWDm4szsPB2
NxHqwewgICErHWNy67huLnUv7/jMS6UhpviiHMeScbpPY57ExKwLxNvrEKzZeiGcBr9KppV7OTcj6
4aUp+XIhZwr73INEpzMYi1MuoK2rieRvHf9vcOQ==
From: "=?utf-8?B?bG9ybmEuZ2xvYmFsd2l0cy5z?="
Subject: =?utf-8?B?V2hvIElzIENvbXBldGluZyB3aXRoIE5LIFBBUlRT?=
=?utf-8?B?IElORFVTVFJJRVMgPyDigJQgQ3VzdG9tcyBEYXRh?=
=?utf-8?B?IEhhcyB0aGUgQW5zd2Vy?=
Mime-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_69C9DEB7_56DAB440_5B55F075"
Content-Transfer-Encoding: 8Bit
Date: Mon, 30 Mar 2026 10:23:51 +0800
X-Priority: 3
Disposition-Notification-To: "=?utf-8?B?bG9ybmEuZ2xvYmFsd2l0cy5z?="
Message-ID:
X-QQ-MIME: TCMime 1.0 by Tencent
X-Mailer: QQMail 2.x
X-QQ-Mailer: QQMail 2.x
X-QQ-mid: xmseza56-0t1774837431tmbdx1al3
To: "=?utf-8?B?cm9vdA==?="
X-Spam_score: 14.9
X-Spam_score_int: 149
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Director, We can help you track your customers’ real
trade records, including their historical purchasing volumes, supplier structure,
and pricing trends. This enables you to assess buyer quali [...]
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
[203.205.221.240 listed in dnsbl.ahbl.org]
[203.205.221.240 listed in dnsbl.ahbl.org]
[203.205.221.240 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.205.221.240 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lorna.globalwits.s(at)foxmail.com]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.3 DYN_RDNS_AND_INLINE_IMAGE Contains image, and was sent by dynamic
rDNS
3.9 IMG_DIRECT_TO_MX No description available.
3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
0.4 AC_FROM_MANY_DOTS Multiple periods in From user name
Subject: {SPAM?} =?utf-8?B?V2hvIElzIENvbXBldGluZyB3aXRoIE5LIFBBUlRT?=
=?utf-8?B?IElORFVTVFJJRVMgPyDigJQgQ3VzdG9tcyBEYXRh?=
=?utf-8?B?IEhhcyB0aGUgQW5zd2Vy?=
ear Director,
We can help you track your customers’ real trade records, including their historical purchasing volumes, supplier structure, and pricing trends. This enables you to assess buyer quality, identify customers with genuine purchasing power, and pinpoint the best timing to initiate cooperation.
Data example: HS Code 3902
If you are interested, we can have an approximately 15-minute online meeting to provide a free demonstration for your reference.
Best regards,
Lorna
Sales Manager
+86 15269112253（WhatsApp） lorna@globalwits.com
No.2 Guanzhuang Road, Chaoyang District,Beijing, P R China
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 29 Mar 2026 22:20:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w745u-00000000MKE-459I
for dave@doctor.nl2k.ab.ca;
Sun, 29 Mar 2026 22:19:18 -0600
Resent-From: The Doctor
Resent-Date: Sun, 29 Mar 2026 22:19:18 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out203-205-221-240.mail.qq.com ([203.205.221.240]:36487)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1w72JO-00000000HoT-2lxY
for root@nk.ca;
Sun, 29 Mar 2026 20:25:18 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=foxmail.com;
s=s201512; t=1774837448;
bh=UXHx9ucifMGd3O7Nz+eXX38iiuVY1SiqwkH/qLbb1tc=;
h=From:Subject:Date:To;
b=DjR+LbZNPGMBCSRb19GnQc3eYcLKD/r6tNVzaNEfbBe+aZwjkaZqrRxZnFcBuLND9
OuJ19wEl9RSCaMs3xvZL+wIMq1iyTdp6sih9x/OXXp8U1XStm4UoUQJEqI1QnzEjYU
LRT6WdCdMKuNOMD5mmGDpuuZTs8ZQPaHKVdLSG88=
X-QQ-XMRINFO: MPJ6Tf5t3I/ylTmHUqvI8+Wpn+Gzalws3A==
X-QQ-XMAILINFO: OemBQX/oPQM7LjPPt3tlSWKLw6ZiQ7+lQEGslLh3d6Gi4ZhP5uMEdbmaKEfe8p
2X1BVRTcIAbEvSWRKrxhoHNonpJMBqOxPTNoeGO9PLSK4/OFYu2s4oS1NV2DxG4ENYBwQw+sLgGD3
Plkpqp0I2lYOjYWS0Lbe+SfDRnWYmjpYMa5rcpn7GOGZ7HAOjx5yakEPaB4EImkkFMoQRrl6rxmmi
1dT9l7nFeMXiDwx0r1ZZwl78D9vedB+2sNzxRLGN44aFR/z8mc+BmXSMads5elxhdbitlNKAUIpGH
mGF9HzObQL++qcVgVYkQijUBwm4fRuGufTBrJ6mplbdkZ3xafXgqedBEr/kwIk+gIhzPc9Lpn63hX
o1SxUtknZr7JADJsZTHtc6lgr++llrcThWhaNCaYG3sMi5cXNoNl9tSBNj0eiJ7uJ6kB2iYRbGdN+
sFYxVCqbe/zg0iqEexyY3CPHsnZRSh9oYuJHQlBPBZGDaivlKqEZyVbKPo5If9Rdx7tpHAW7M6rga
3PQzWYRZDuI9UCRuqUoj6AC8sm02C6BYTJm3P5Hkq1OvKLtrMcVKg0Cd6zg8Wehq3IJ8z4u93udxO
0CW2hZWqhTEI7x5HdanNgzKrnbP40Am7X5MX0rH5ZVlPEHVc7QM51KKD5rVd73+Fyxx4E1fDDrN7w
5sqW96kIcYa/jOeulhFTbZW3ccW0u7riZz7p0OKNoOZOFJ/RVvtCOSQ5fk2c3WT3HOFmPlF8sR9QH
2T0+zdd8xQ8FftSoF3XT30lvpm+rhs4Pbkd8qLAvSMaEOYzX/VpTs9EehZ6nFgGzj9F1LMmrtZ1Vd
+AiftHqEkW637R5Xo2LgJzoL+WafrOtnwCa2p8DpswdLXdj8zA7pehePxoFVHxvk+qnX6Qn2cL3TZ
MYc/4P0mgCqWZ5DaKfR97tCgHviXE/mMfKcVGKNMqij19kZc8E5yI/4bqVgt/Dpku25o2I+VLiOZS
/R3HUjSLy2DK/ZcjtO7RxAdJ1NdJIi1PThW/VgdqcYtT7GOglTDB5vAHXfUwewjn8vc8xEaQAmf+2
HudZUiIpYsQ9u1hiaxNuHygg77RgeJoxdJFgjBaaZPKmCkI6ypvTevMzpruFZn27+75k8znp0uO2P
B+IbhMd2fsUjOCLPjXzWU5wbMTIIeh12T4Cs2ZJoyfd6kZ2tAIfodP5aOi03znspqNSZcJzpFUWD+
uMEAkc0XxOVQA8526GVTF9NszLXizAfjTckdWVWDCFeARPpIUuNVFP8ihIx7g8RNHZpWDm4szsPB2
NxHqwewgICErHWNy67huLnUv7/jMS6UhpviiHMeScbpPY57ExKwLxNvrEKzZeiGcBr9KppV7OTcj6
4aUp+XIhZwr73INEpzMYi1MuoK2rieRvHf9vcOQ==
From: "=?utf-8?B?bG9ybmEuZ2xvYmFsd2l0cy5z?="
Subject: =?utf-8?B?V2hvIElzIENvbXBldGluZyB3aXRoIE5LIFBBUlRT?=
=?utf-8?B?IElORFVTVFJJRVMgPyDigJQgQ3VzdG9tcyBEYXRh?=
=?utf-8?B?IEhhcyB0aGUgQW5zd2Vy?=
Mime-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----=_NextPart_69C9DEB7_56DAB440_5B55F075"
Content-Transfer-Encoding: 8Bit
Date: Mon, 30 Mar 2026 10:23:51 +0800
X-Priority: 3
Disposition-Notification-To: "=?utf-8?B?bG9ybmEuZ2xvYmFsd2l0cy5z?="
Message-ID:
X-QQ-MIME: TCMime 1.0 by Tencent
X-Mailer: QQMail 2.x
X-QQ-Mailer: QQMail 2.x
X-QQ-mid: xmseza56-0t1774837431tmbdx1al3
To: "=?utf-8?B?cm9vdA==?="
X-Spam_score: 14.9
X-Spam_score_int: 149
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Director, We can help you track your customers’ real
trade records, including their historical purchasing volumes, supplier structure,
and pricing trends. This enables you to assess buyer quali [...]
Content analysis details: (14.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
[203.205.221.240 listed in dnsbl.ahbl.org]
[203.205.221.240 listed in dnsbl.ahbl.org]
[203.205.221.240 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[203.205.221.240 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
[203.205.221.240 listed in will-spam-for-food.eu.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[203.205.221.240 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[lorna.globalwits.s(at)foxmail.com]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_IMAGE_RATIO_08 BODY: HTML has a low ratio of text to image area
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.5 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
1.3 DYN_RDNS_AND_INLINE_IMAGE Contains image, and was sent by dynamic
rDNS
3.9 IMG_DIRECT_TO_MX No description available.
3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)
0.4 AC_FROM_MANY_DOTS Multiple periods in From user name
Subject: {SPAM?} =?utf-8?B?V2hvIElzIENvbXBldGluZyB3aXRoIE5LIFBBUlRT?=
=?utf-8?B?IElORFVTVFJJRVMgPyDigJQgQ3VzdG9tcyBEYXRh?=
=?utf-8?B?IEhhcyB0aGUgQW5zd2Vy?=
ear Director,
We can help you track your customers’ real trade records, including their historical purchasing volumes, supplier structure, and pricing trends. This enables you to assess buyer quality, identify customers with genuine purchasing power, and pinpoint the best timing to initiate cooperation.
Data example: HS Code 3902
If you are interested, we can have an approximately 15-minute online meeting to provide a free demonstration for your reference.
Best regards,
Lorna
Sales Manager
+86 15269112253（WhatsApp） lorna@globalwits.com
No.2 Guanzhuang Road, Chaoyang District,Beijing, P R China